gokards
ChallengesCreateAccountAI Parse
gokards
PrivacyTermsContact

Legal

Privacy Policy

gokards is a study tool for making flashkards and quizzes. This policy explains what information the app handles, why, and where it goes.

Last updated October 21, 2026

On this page
  1. The short version
  2. What we collect
  3. How we use it
  4. Everything you publish is public
  5. Services we rely on
  6. Data stored in your browser
  7. How long we keep data
  8. Your choices and rights
  9. Children
  10. Security
  11. Changes to this policy
  12. Contact

The short version

  • You get an anonymous account automatically: a random ID with no email or password. Adding Google or an email is optional and only needed to use the same account on another device.
  • The first time you open or make a deck, upload a document, or play a challenge, we ask your name (or you can stay anonymous), age range, grade level, and program. These answers are private and used only for usage reports.
  • Decks, quizzes, the names you type, and leaderboard entries are stored in our database and are visible to anyone with the link or on the home page.
  • When you use AI Parse or generate an AI quiz, the text of your file or kards is sent to Google's Gemini API to produce the result.
  • We use Vercel Analytics to count page views. We don't use advertising trackers and we don't sell data.

What we collect

About you

The first time you open or create a deck, create a challenge, upload a document for AI Parse, or play a challenge, we ask a few questions. Answering them is required before you can use those features. Browsing the decks and challenges doesn't ask anything:

  • Name: whatever you type, or “Anonymous” if you choose to stay anonymous. A nickname is fine.
  • Age range, such as 16–17 or 18–21. We don't ask for your exact age or birthday.
  • Grade level, such as Grade 11 or 2nd year college, and your Senior High strand or college program if that applies.

These answers are private. They are never shown on the site. We keep them alongside your account ID so we can delete them if you ask, but they aren't shown with the decks, quizzes, or leaderboard entries you create.

Your account

When you accept these policies, we create an anonymous account for you through Supabase Auth. It is a random ID stored in your browser; it has no email, password, or name attached. Everything you create or do is tied to that ID so that only you can edit or delete your decks, and so your study progress is your own.

On the Account page you can optionally attach a Google account or an email address. If you do, we store that email address (and, for Google, the identifier Google gives us) so you can sign in to the same account from another device. We never post with it or share it. The display name you choose there is prefilled on the things you create; you can change it on each one.

If you attach Google and have not set a display name yet, we copy the name on your Google account and use it as your display name, so you do not have to type one. You can change it at any time on the Account page or on anything you create. Attaching an email address does not give us a name.

Content you create

  • Decks and kards: the title, description, subject, creator name, and the front and back of every kard.
  • Quizzes: the generated questions, the question types you chose, answers, score, subject, and creator name.
  • Quiz attempts: when you take a shared quiz, the player name you enter, your answers, your score, and how long you took.
  • Study progress: spaced-repetition data for each kard, such as ease, interval, due date, and when you last reviewed it.

Names are whatever you type. You don't have to use your real name, and we recommend a nickname if you'd rather not be identifiable.

Files you upload

When you use AI Parse, text is extracted from your .md, .pdf, .docx, or .pptx file inside your browser. Images are read with on-device OCR. The original file is never uploaded to or stored on our servers. Only the extracted text is sent on, as described below.

Messages you send us

If you use the contact form, we store the topic, your email address, and any name, link, and message you include. These messages are private. They are never shown on the site, and we use them only to reply to you and handle your request.

Usage and technical data

Vercel Analytics records anonymous page-view information such as the page visited, referrer, approximate country, browser, operating system, and device type. It does not use cookies. Our hosting provider also keeps standard server logs, which include IP addresses, for security and debugging.

Each time you use AI Parse or generate an AI quiz, we record which feature you used, which AI model answered, whether it worked, the time, and your account ID. We don't record the text you sent or what came back. We use these records, together with the dates on your decks, reviews, and attempts, to count how many people use gokards each day and which features they use. Reports show totals only.

How we use it

  • To save and show your decks, quizzes, and leaderboards.
  • To generate kards and quiz questions with AI when you ask for them.
  • To schedule reviews based on your spaced-repetition progress.
  • To grade shared quiz attempts on the server and rank the leaderboard.
  • To reply to messages and handle removal, abuse, and privacy requests.
  • To understand which features get used, and to find and fix problems or abuse.
  • To make demographic reports about who uses gokards, such as how many users are in Senior High or college. Reports show totals only and never include names.

We don't use your content to build advertising profiles, and we don't sell or rent it to anyone.

Everything you publish is public

gokards has no sign-in and no private decks. Anything you save, including decks, kards, quizzes, creator names, and leaderboard entries, can be viewed by anyone who visits the site or has a share link. Decks appear in the public list on the home page.

The only exceptions are your onboarding answers and messages you send through the contact form. Those are never shown publicly.

Don't put personal, confidential, or sensitive information in your kards or uploads. That includes things like passwords, health or financial details, other people's personal information, or material from work or school that you aren't allowed to share.

Services we rely on

gokards uses a few providers to run. Each handles data under its own privacy policy.

Supabase
Hosts the database where decks, kards, quizzes, attempts, study progress, onboarding answers, and contact messages are stored.
Google Gemini API
Receives the extracted text of files you parse, and the kards of a deck when you generate an AI quiz. Google processes this text to return a response and may keep it for a limited time under its own terms.
Vercel
Hosts the website, runs the server routes, and provides the anonymous page-view analytics.
jsDelivr CDN
Serves the OCR engine and language data that your browser downloads when you parse an image, so jsDelivr can see your IP address. Your image stays on your device.

These providers may process data in countries other than your own. We may also disclose information if the law requires it, or to protect gokards and its users from fraud or abuse.

Data stored in your browser

gokards uses your browser's local storage, not cookies, to remember:

  • that you agreed to these policies, and which version you agreed to,
  • that you finished onboarding, as a random reference code that points to your answers,
  • your account session, so you stay signed in to your anonymous or linked account,
  • your light or dark theme choice, and
  • a copy of your study progress for each deck, used when the database can't be reached.

You can remove this at any time by clearing site data in your browser settings.

How long we keep data

Decks, quizzes, attempts, and progress are kept until they are deleted. You can delete your own decks from the deck page. For anything else, or to delete your whole account, send a removal requestand we'll remove it. Onboarding answers are kept until you ask us to delete them. Contact messages are kept only as long as needed to handle your request. Records of AI use are kept until your account is deleted. Analytics and server logs are kept for the periods set by Vercel.

Your choices and rights

Depending on where you live, you may have the right to access, correct, or delete information about you, or to object to how it's used. To make a request, use the contact form. Include the link to the deck or quiz, or the email you attached to your account, so we can find it.

For your onboarding answers, send the request from the same browser you used for onboarding. The contact form adds your reference code automatically so we can find and delete them.

You can also simply choose not to use AI features, and use a nickname instead of your name.

Children

gokards isn't directed at children under 13, and we don't knowingly collect personal information from them. If you choose “Under 13” during onboarding, you can't continue to those features and none of your answers are saved. If you believe a child has shared personal information on gokards, contact usand we'll remove it.

If you're between 13 and the age of majority where you live, you should have a parent or guardian's permission before using gokards and answering the onboarding questions.

Security

Data travels over HTTPS and our API keys are kept on the server. No online service is perfectly secure, though, and content on gokards is public by design, so treat anything you save as something others can read.

Changes to this policy

We may update this policy as gokards changes. When we do, we'll update the date at the top of this page. Continuing to use gokards after a change means you accept the updated policy.

Contact

For questions, removal requests, or privacy requests, use our contact page or email apostol.eliciaklyde@gmail.com. You can also read our Terms of Service.

See also our Terms of Service.